Systems and methods for complementary control of an autonomous vehicle are disclosed. A primary controller provides a first plurality of instructions to an AV platform for operating the AV in an autonomous mode along a planned path based on sensor data from a primary sensor system and a secondary sensor system, and provides information that includes a fallback monitoring region to a complementary controller. The complementary controller receives sensor data from the secondary sensor system that includes sensed data for a fallback monitoring region, analyzes the received sensor data to determine whether a collision is imminent with an object detected in the fallback monitoring region, and cause the AV platform to initiate a collision mitigation action if a collision is determined to be imminent.

An apparatus for controlling power of a vehicle includes a first controller that generates a control signal for controlling output of power supplied to at least one vehicle load, and a second controller that determines whether the first controller is in a normal operation status by monitoring the first controller, and controls a power switch to maintain output of the control signal to the at least one vehicle load when the first controller is not in the normal operation status.

An apparatus for controlling power of a vehicle includes a first controller that generates a control signal for controlling output of power supplied to at least one vehicle load, and a second controller that determines whether the first controller is in a normal operation status by monitoring the first controller, and controls a power switch to maintain output of the control signal to the at least one vehicle load when the first controller is not in the normal operation status.

A system that may include multiple driving related systems that are configured to perform driving related operations; a selection module; multiple fault collection and management units that are configured to monitor statuses of the multiple driving related systems and to report, to the selection module, at least one out of (a) an occurrence of at least one critical fault, (b) an absence of at least one critical fault, (c) an occurrence of at least one non-critical fault, and (d) an absence of at least one non-critical fault; and wherein the selection module is configured to respond to the report by performing at least one out of: (i) reset at least one entity out of the multiple fault collection and management units and the multiple driving related systems; and (ii) select data outputted from a driving related systems.

A system that may include multiple driving related systems that are configured to perform driving related operations; a selection module; multiple fault collection and management units that are configured to monitor statuses of the multiple driving related systems and to report, to the selection module, at least one out of (a) an occurrence of at least one critical fault, (b) an absence of at least one critical fault, (c) an occurrence of at least one non-critical fault, and (d) an absence of at least one non-critical fault; and wherein the selection module is configured to respond to the report by performing at least one out of: (i) reset at least one entity out of the multiple fault collection and management units and the multiple driving related systems; and (ii) select data outputted from a driving related systems.

Vehicle movement in an automatic driving operation is regulated in an automatic driving operation, which is switchable between a regular operating mode and an emergency operating mode when a functional impairment of a main control device is established. In the regular operating mode, the regular desired trajectory, the emergency operation desired trajectory, and the lane course of a driving lane driven along by the vehicle are continuously determined in a coordinate system, fixed to the vehicle, of the main control device. The determined emergency operation desired trajectory and the determined lane course are supplied to the ancillary control device and stored there. In the emergency operating mode, the lane course of the driving lane driven along by the vehicle is determined in a coordinate system, fixed to the vehicle, of the ancillary control device. In the emergency operating mode, based on the lane course stored in the ancillary control device and the lane course stored in the ancillary control device, an angle error between the coordinate systems of the main control device and the ancillary control device is determined and its influence on the regulation carried out by the ancillary control device is compensated for.

The present disclosure relates to an apparatus and a method for controlling a vehicle, and more particularly to a vehicle control apparatus having a redundant architecture. A vehicle control apparatus according to one embodiment of the present disclosure includes: a receiver, configured to receive sensing information from a vehicle sensor; a first electronic controller, configured to generate a first vehicle control command based on the received sensing information; a monitor, configured to monitor whether the first electronic controller is out of order; and a second electronic controller, configured to generate a second vehicle control command based on the received sensing information if the first electronic controller is out of order.

The present disclosure relates to an apparatus and a method for controlling a vehicle, and more particularly to a vehicle control apparatus having a redundant architecture. A vehicle control apparatus according to one embodiment of the present disclosure includes: a receiver, configured to receive sensing information from a vehicle sensor; a first electronic controller, configured to generate a first vehicle control command based on the received sensing information; a monitor, configured to monitor whether the first electronic controller is out of order; and a second electronic controller, configured to generate a second vehicle control command based on the received sensing information if the first electronic controller is out of order.

A travel control apparatus includes a processor programmed to detect a state of each of a plurality of power sources constituting a power source system, the power source system supplying power to the autonomous driving system, and set a fail operation mode corresponding to whether the detected state of each of the plurality of power source is a state configured to supply an amount of power necessary for a safety of autonomous driving.

A travel control apparatus includes a processor programmed to detect a state of each of a plurality of power sources constituting a power source system, the power source system supplying power to the autonomous driving system, and set a fail operation mode corresponding to whether the detected state of each of the plurality of power source is a state configured to supply an amount of power necessary for a safety of autonomous driving.